Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: /q2pu8+2a/mxZNB832CYkyo12Mb4SeVZCfNXAlgw184=
Subject key identifier: 8B:3D:E9:BB:CA:49:96:FF:08:FD:6A:37:B2:4B:DA:37:1D:5B:7C:9D
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 019CA97C88DA1843638033D1354D9F160376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0A54
Signing time: Sun 01 Mar 2026 13:00:36 +0000
Manifest this update: Sun 01 Mar 2026 13:00:36 +0000
Manifest next update: Mon 02 Mar 2026 13:00:36 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: y3eMDitrqpLHUeKyRAP3uJn0sx5OP8THmLAyjXgQ/O4=)
3: YUvYfLIz9Os3TS_5BCkoO47Tc7w.asa (hash: ecIQbMb7coA3jYnuN9HJXpp9aBbglIqzOo2LBtLMzps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:88:da:18:43:63:80:33:d1:35:4d:9f:16:03:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Mar 1 13:00:36 2026 GMT
Not After : Mar 2 13:00:36 2026 GMT
Subject: CN=8b3de9bbca4996ff08fd6a37b24bda371d5b7c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:6c:7f:53:45:2f:76:ba:f0:71:ae:bd:de:
d0:51:43:30:b6:2d:2b:7c:f7:b6:98:d8:f6:4a:bf:
f1:87:ba:df:ba:e9:fd:15:31:b8:b8:72:8c:cf:e7:
af:98:98:6c:62:72:d4:79:90:3e:7f:e7:bc:cc:dc:
ac:d3:68:4f:7b:71:a0:90:5f:02:1e:3c:3e:f6:30:
15:59:17:0a:e4:4e:db:5c:24:f3:6f:76:ea:19:0a:
92:8b:75:37:bd:ed:a5:ce:d5:23:c4:53:cd:9f:da:
e1:a8:b0:d0:4f:15:b4:af:0f:5e:f4:28:1d:43:c5:
7c:ac:96:de:0b:0b:96:e7:88:08:56:f8:22:e5:58:
58:a0:e5:5b:8d:76:f9:60:20:49:fe:af:ca:e7:69:
f6:1d:81:33:57:4a:3e:92:1d:53:61:be:2b:81:fa:
87:e1:f8:2a:92:15:b9:15:11:e4:2a:32:d6:4c:7d:
a3:88:fb:99:d8:65:e6:1d:c4:5f:2a:3d:68:7c:d1:
d2:66:ba:1a:15:b8:0e:fe:d8:0e:78:a9:65:e0:89:
0c:df:d9:29:e9:98:d2:fe:4a:4b:c7:d8:b6:91:03:
03:30:03:1a:16:be:ad:6e:a9:30:b3:7e:4d:db:89:
8d:90:11:f3:46:1f:09:a0:5e:b5:69:18:5d:47:7f:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:E9:BB:CA:49:96:FF:08:FD:6A:37:B2:4B:DA:37:1D:5B:7C:9D
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:2d:1e:49:c3:bf:33:3d:6f:ed:e6:41:2f:cd:09:8e:8d:
2a:1e:b8:db:8a:33:99:80:db:5b:c2:12:e7:cb:a4:61:61:85:
5f:ac:1d:64:a0:21:a4:43:b6:36:e0:ef:e0:39:a7:17:21:6d:
cb:4e:17:2f:b5:01:7a:46:7a:b4:7e:a4:6c:dc:09:98:17:ce:
6b:d3:15:b9:f6:a5:69:13:60:0e:99:05:9e:2f:c9:a3:20:27:
f7:92:58:ef:c1:ec:2b:60:bf:65:2e:1c:1a:ca:d7:69:2f:b1:
d9:0c:e9:a5:ca:50:ac:c3:d4:63:b7:ea:7d:54:45:05:f6:5b:
61:ba:dd:b7:ae:46:bf:8b:4f:ac:38:a0:85:0f:4f:83:28:3b:
11:b9:70:21:08:21:d8:b2:c2:51:c2:97:19:f8:1d:14:34:9d:
6b:eb:f2:e3:c3:58:34:fb:cf:e8:3f:d4:bc:11:64:94:84:f8:
b1:d1:49:b7:29:fc:80:8a:f9:c8:55:d8:8c:61:3f:0c:6f:47:
71:6d:19:8d:fd:2f:85:91:a7:f0:87:90:33:c9:0b:b7:56:9b:
16:9d:28:0d:a4:54:1c:0f:dd:6c:b0:f1:4d:4b:55:9c:ea:ee:
05:c0:c3:fe:62:43:a7:cd:bf:bb:63:71:44:d1:df:a0:85:89:
a3:52:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:07 2026 by rpki-client